Observed incident

Chainstack discloses account-data access and requests credential rotation

Reported

Published here

What happened

An intruder accessed customer account data through an unnamed third-party component. Chainstack assesses the intrusion as part of an AI-powered campaign; exposed information may include contact details and password hashes.

Parties and reporting

AI tools and systems: Unspecified AI-powered attack tools (provider assessment), Chainstack account systems

Outcome

Access paths were cut October 31 and the investigation closed November 2. Node credentials are treated as exposed despite no evidence they were read. Customer services remained operational.

Operating lesson

Change affected passwords, rotate node credentials, regenerate platform API keys and investigate their subsequent use.

Evidence and limits

November 3 disclosure describes development access October 26 and production access October 29. The provider does not name a model, framework, actor or victim count. Nodes, console and API were not modified; that is not a claim of no access. Other campaigns are not linked solely by this assessment.

Sources